Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/GRUIRLPslnKEY2Xjsvf_G-zul6U.roa
File: GRUIRLPslnKEY2Xjsvf_G-zul6U.roa (raw, json)
Hash identifier: PlalVKCgMhvVm0pbdreJAikQ+hXP4zFxlNesi51ptas=
Subject key identifier: 19:15:08:44:B3:EC:96:72:84:63:65:E3:B2:F7:FF:1B:EC:EE:97:A5
Certificate issuer: /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial: 019353EB4E9652DDE0F7AE21C579F19C01D2
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/GRUIRLPslnKEY2Xjsvf_G-zul6U.roa
Signing time: Fri 22 Nov 2024 12:49:10 +0000
ROA not before: Fri 22 Nov 2024 12:49:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8468
IP address blocks: 178.16.224.0/22 maxlen: 22
178.16.228.0/23 maxlen: 23
178.16.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:eb:4e:96:52:dd:e0:f7:ae:21:c5:79:f1:9c:01:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Validity
Not Before: Nov 22 12:49:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19150844b3ec9672846365e3b2f7ff1becee97a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:78:43:25:ae:da:58:d7:48:32:54:2e:01:
a9:3a:eb:f4:71:a2:f4:eb:4b:01:78:9a:7c:4a:16:
7e:91:3c:b7:ec:46:38:c5:02:57:1a:70:da:0b:a7:
5f:3d:3e:19:ae:3f:98:53:af:41:60:c9:e2:3a:9a:
66:8c:66:75:ca:ce:13:f1:e4:d3:82:c6:f7:ab:4d:
b1:32:76:3b:be:9b:2d:ea:24:86:12:04:d3:ae:3e:
41:1f:67:47:64:f2:69:94:3c:7d:3b:43:1b:00:3c:
aa:9c:4b:21:d7:2b:de:9b:0a:08:88:8e:da:5c:12:
d5:9d:1b:2b:39:88:76:d8:44:43:16:f0:f8:72:b0:
96:19:23:f0:fe:dd:7c:cb:d6:87:1d:cd:4b:5f:99:
60:63:50:53:10:fe:a5:87:61:db:01:73:8e:5d:c2:
4b:53:ca:bf:b4:29:7e:b1:66:49:a0:c1:ca:c8:19:
74:4d:5a:54:90:84:13:84:62:9c:00:c3:32:d0:5f:
bc:f9:9f:c9:a5:4d:7b:4a:fe:bf:73:b6:77:04:94:
62:97:3b:37:22:53:c2:44:04:f2:f5:6c:42:b9:22:
f2:22:a5:cb:c0:1d:a4:57:1b:6a:f7:e4:47:59:3b:
5a:6f:fb:7b:64:75:71:ef:b8:20:c0:b3:47:ba:be:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:15:08:44:B3:EC:96:72:84:63:65:E3:B2:F7:FF:1B:EC:EE:97:A5
X509v3 Authority Key Identifier:
keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/GRUIRLPslnKEY2Xjsvf_G-zul6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.224.0-178.16.229.255
178.16.237.0/24
Signature Algorithm: sha256WithRSAEncryption
02:76:49:a9:f4:52:52:26:31:fc:1c:e8:87:06:fc:4e:92:64:
f2:c0:8e:db:a6:8e:2d:03:57:ab:3d:5b:81:e5:34:13:9a:21:
df:80:c0:96:0e:67:cd:9c:20:a5:63:c8:a0:0b:7e:5f:86:1b:
8c:8c:ee:59:6f:e0:e8:f9:d9:76:69:0d:d6:93:60:56:23:89:
73:29:75:97:56:75:e8:c6:7e:e0:1b:4f:cc:c0:63:3b:61:69:
ab:5f:f8:44:96:11:30:e3:17:36:f5:10:63:9b:61:57:09:65:
dc:4f:d9:96:28:cf:15:99:30:75:98:ea:d0:95:78:c9:2c:5b:
e3:a7:3d:c5:57:f4:04:2a:e1:9e:9d:06:a3:28:2d:59:53:8a:
2d:b4:56:1d:aa:90:13:80:5b:4d:19:c6:1e:13:80:c9:b3:5c:
7e:26:de:bd:ac:51:0a:d0:30:2a:2a:f8:2c:b1:fb:a0:96:7f:
c7:17:f2:c4:0b:f6:07:3b:f9:1c:47:58:e2:c5:bb:ef:40:fb:
d9:87:dd:9f:41:d2:b7:9f:1b:7f:2f:ae:c2:d1:9e:86:b5:7c:
b1:14:c6:4e:17:b6:51:83:cc:cd:1a:c1:09:ae:61:d6:b2:93:
55:57:14:01:50:c2:b1:38:0c:08:01:e0:b3:82:6e:bb:65:60:
ec:18:b5:e2
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZNT606WUt3g964hxXnxnAHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDk1YTRjZWNiZWFmYjNlYWRmNmVkMDM0OWJiMGI5NmRh
NDY0ZWUwHhcNMjQxMTIyMTI0OTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTE1MDg0NGIzZWM5NjcyODQ2MzY1ZTNiMmY3ZmYxYmVjZWU5N2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteJ4QyWu2ljXSDJULgGpOuv0caL0
60sBeJp8ShZ+kTy37EY4xQJXGnDaC6dfPT4Zrj+YU69BYMniOppmjGZ1ys4T8eTT
gsb3q02xMnY7vpst6iSGEgTTrj5BH2dHZPJplDx9O0MbADyqnEsh1yvemwoIiI7a
XBLVnRsrOYh22ERDFvD4crCWGSPw/t18y9aHHc1LX5lgY1BTEP6lh2HbAXOOXcJL
U8q/tCl+sWZJoMHKyBl0TVpUkIQThGKcAMMy0F+8+Z/JpU17Sv6/c7Z3BJRilzs3
IlPCRATy9WxCuSLyIqXLwB2kVxtq9+RHWTtab/t7ZHVx77ggwLNHur5pMQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBkVCESz7JZyhGNl47L3/xvs7pelMB8GA1UdIwQY
MBaAFGNJWkzsvq+z6t9u0DSbsLltpGTuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMt
MzgyMGY3ZWUyY2I4LzEvR1JVSVJMUHNsbktFWTJYanN2Zl9HLXp1bDZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xZmRlMTgtMjg3My00ZmUwLTg2OWMtMzgyMGY3ZWUyY2I4
LzEvWTBsYVRPeS1yN1BxMzI3UU5KdXd1VzJrWk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAWyEOAD
BAGyEOQDBACyEO0wDQYJKoZIhvcNAQELBQADggEBAAJ2San0UlImMfwc6IcG/E6S
ZPLAjtumji0DV6s9W4HlNBOaId+AwJYOZ82cIKVjyKALfl+GG4yM7llv4Oj52XZp
DdaTYFYjiXMpdZdWdejGfuAbT8zAYzthaatf+ESWETDjFzb1EGObYVcJZdxP2ZYo
zxWZMHWY6tCVeMksW+OnPcVX9AQq4Z6dBqMoLVlTii20Vh2qkBOAW00Zxh4TgMmz
XH4m3r2sUQrQMCoq+Cyx+6CWf8cX8sQL9gc7+RxHWOLFu+9A+9mH3Z9B0refG38v
rsLRnoa1fLEUxk4XtlGDzM0awQmuYdayk1VXFAFQwrE4DAgB4LOCbrtlYOwYteI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:12 2024 by rpki-client on console-fra.rpki-client.org